What is the CVSS score of CVE-2026-19297?

CVE-2026-19297 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.4%.

Which versions of IBM Langflow are affected by CVE-2026-19297?

IBM Langflow OSS versions 1.0.0-1.9.6 lack brute-force protection on authentication, enabling attackers to compromise user accounts through repeated login attempts.. A patch is available.

How to fix or mitigate CVE-2026-19297?

Within 24 hours, identify all IBM Langflow OSS deployments running versions 1.0.0 through 1.9.6 and isolate or disable internet-facing instances. Within 7 days, apply the vendor-released patch to all affected systems, prioritizing production deployments. Within 30 days, audit user passwords for compromise, implement account lockout policies, and deploy network-level rate limiting on authentication endpoints.

IBM Langflow CVE-2026-19297

EUVD-2026-58475 CRITICAL

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2026-08-13 ibm

GHSA-h6hj-8qx6-p2fm

Authentication Bypass IBM Langflow Oss

9.1

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

vuln.today AI

7.4 HIGH

Network, unauthenticated, no interaction, but success depends on guessing valid credentials so AC:H; account takeover yields C:H/I:H with no availability impact.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 13, 2026 - 21:35 vuln.today

CVE Published

Aug 13, 2026 - 20:46 nvd

CRITICAL 9.1

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts.

AnalysisAI

Account takeover in IBM Langflow OSS versions 1.0.0 through 1.9.6 is possible because the platform fails to limit repeated failed authentication attempts (CWE-307), letting remote attackers brute-force or credential-stuff their way into user accounts. IBM (the reporting vendor) rates it CVSS 9.1 with high confidentiality and integrity impact, reflecting full compromise of a targeted account. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify exposed Langflow login

Delivery

Enumerate/guess valid usernames

Exploit

Launch automated password brute-force

Execution

Bypass absent rate limiting

Persist

Obtain valid credentials

Impact

Access victim account and stored secrets

Access

Identify exposed Langflow login

Delivery

Enumerate/guess valid usernames

Exploit

Launch automated password brute-force

Execution

Bypass absent rate limiting

Persist

Obtain valid credentials

Impact

Access victim account and stored secrets

Vulnerability AssessmentAI

Exploitation	Exploitation requires network reachability to a Langflow OSS 1.0.0-1.9.6 authentication endpoint (default web login) and a target account whose password is weak, default, or present in a breach/dictionary list - the vulnerability removes the lockout barrier but the attacker still must guess a valid credential. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:N) scores 9.1 and indicates network-reachable, unauthenticated exploitation with no user interaction, which justifies a high priority for internet-exposed instances. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker discovers an internet-exposed Langflow login page and, because no lockout or rate limiting is enforced, runs an automated credential-stuffing or dictionary attack against known or guessed usernames. After enough attempts a valid password is found, granting the attacker full access to the victim's Langflow account, its stored workflows, connected credentials, and API keys. …
Remediation	Patch available per vendor advisory: upgrade to the fixed IBM Langflow OSS release referenced in IBM bulletin https://www.ibm.com/support/pages/node/7283558 (consult the bulletin for the exact patched version, as a specific fixed version number was not included in the provided data - do not rely on an assumed number). … Detailed patch versions, workarounds, and compensating controls in full report.